Teen “Hackers” on Discord Selling Malware for Quick Cash

By Deeba Ahmed Cybersecurity researchers urge parents to keep track of their childrens online activities. Avast security researchers have discovered a server on… This is a post from HackRead.com Read the original post: Teen "Hackers" on Discord Selling Malware for Quick Cash...

[SECURITY] Fedora 36 Update: golang-github-prometheus-2.32.1-6.fc36

The Prometheus monitoring system and time series database...

[SECURITY] Fedora 36 Update: dnscrypt-proxy-2.1.1-4.fc36

A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2 and DNS-over-HTTP/2. Features: - DNS traffic encryption and authentication. Supports DNS-over-HTTPS DoH and DNSCrypt. - DNSSEC compatible - DNS query monitoring, with separate log files for regular and...

CVE-2021-38941

IBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable to host information leakage or destruction if unauthorized access to these containers could execute arbitrary commands. IBM X-Force ID: 211048...

CVE-2021-38941

IBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable to host information leakage or destruction if unauthorized access to these containers could execute arbitrary commands. IBM X-Force ID: 211048...

Design/Logic Flaw

IBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable to host information leakage or destruction if unauthorized access to these containers could execute arbitrary commands. IBM X-Force ID: 211048...

CVE-2021-38941

IBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable to host information leakage or destruction if unauthorized access to these containers could execute arbitrary commands. IBM X-Force ID: 211048...

CVE-2021-38941

The CVE-2021-38941 entry affects IBM Cloud Pak for Multicloud Management Monitoring. Affected versions 2.0–2.3 run a few containers in privileged mode, enabling potential host information leakage or destruction if an attacker can execute commands inside those containers. Root cause: containers wi...

Schneider Electric Geo SCADA Mobile Information Disclosure Vulnerability

Schneider Electric Geo SCADA Mobile is a mobile extension from Schneider Electric, a French company. It provides real-time remote access to critical SCADA data, allowing system users to monitor performance while "on the go," increasing employee productivity and improving overall system performanc...

IBM CloudPak for Multicloud Monitoring 安全漏洞

IBM CloudPak for Multicloud Monitoring is an open hybrid cloud management platform from IBM USA. A security vulnerability exists in IBM CloudPak for Multicloud Monitoring versions 2.0 through 2.3 that stems from vulnerability to host information leakage or corruption...

Security Bulletin: IBM Cloud Pak for Multicloud Management Monitoring runs containers with excessive permissions (CVE-2021-38941)

Summary IBM CloudPak for Multicloud Monitoring had a few containers running in priviliged mode which is vulnerable to host information leakage or destruction if unauthorized access to these containers could execute arbitrary commands. Now only containers requiring this permissions are running in...

CVE-2022-29271

In Nagios XI through 5.8.5, a read-only Nagios user due to an incorrect permission check is able to schedule downtime for any host/services. This allows an attacker to permanently disable all monitoring checks...

CVE-2022-29271

In Nagios XI through 5.8.5, a read-only Nagios user due to an incorrect permission check is able to schedule downtime for any host/services. This allows an attacker to permanently disable all monitoring checks...

CVE-2022-29271

In Nagios XI through 5.8.5, a read-only Nagios user due to an incorrect permission check is able to schedule downtime for any host/services. This allows an attacker to permanently disable all monitoring checks...

Design/Logic Flaw

In Nagios XI through 5.8.5, a read-only Nagios user due to an incorrect permission check is able to schedule downtime for any host/services. This allows an attacker to permanently disable all monitoring checks...

CVE-2022-29271

In Nagios XI through 5.8.5, a read-only Nagios user due to an incorrect permission check is able to schedule downtime for any host/services. This allows an attacker to permanently disable all monitoring checks...

CVE-2022-29271

CVE-2022-29271 affects Nagios XI 5.8.5 and earlier. Reported root cause: a read-only Nagios user can schedule downtime for any host/service due to an incorrect permission check, enabling an attacker to permanently disable all monitoring checks. Publicly documented impact is a permission flaw rath...

PT-2022-19513 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI versions 5.8.5 and earlier Description: The issue allows a read-only Nagios user to schedule downtime for any host or services due to an incorrect permission check. This enables an attacker to permanently disable all monitoring...

CVE-2021-38941

IBM CloudPak for Multicloud Monitoring 2.0 and 2.3 has a few containers running in privileged mode which is vulnerable to host information leakage or destruction if unauthorized access to these containers could execute arbitrary commands. IBM X-Force ID: 211048...

GSD-2022-1003423 drm/v3d: Fix null pointer dereference of pointer perfmon

drm/v3d: Fix null pointer dereference of pointer perfmon This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...